Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
File: d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa (raw, json)
Hash identifier: NNYBI8uUAPdFeZxVYyVLGGrsEaZi6La4rKJ9cEqG6gk=
Subject key identifier: CC:59:6E:60:40:7A:40:2C:98:83:7D:14:06:F6:65:88:C6:B3:5E:C9
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F43285848854B65334C9C6B6E17C1AA00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
Signing time: Sun 12 Jan 2025 14:00:53 +0000
ROA not before: Sun 12 Jan 2025 14:00:53 +0000
ROA not after: Sat 12 Apr 2025 13:00:53 +0000
asID: 6167
IP address blocks: 75.221.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:85:4b:65:33:4c:9c:6b:6e:17:c1:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Jan 12 14:00:53 2025 GMT
Not After : Apr 12 13:00:53 2025 GMT
Subject: CN=6444e8fe-a36a-4a19-8c3d-831a8fc556ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5e:49:ef:d6:c7:18:ad:3d:55:4d:fd:0b:5c:
38:89:52:83:ef:fa:dc:aa:39:9a:ec:04:81:39:c3:
17:b9:b5:16:cc:43:56:34:7e:8a:b4:03:0f:ec:0d:
4c:ba:9b:7a:dd:85:51:31:9b:b5:c1:28:96:88:0a:
f3:80:68:0d:de:a1:a0:d2:f6:18:a8:de:69:32:05:
b1:07:e3:59:ea:3f:ad:4a:2d:34:a2:9f:72:5c:b6:
84:e9:f2:1c:59:86:19:cc:2a:18:3d:ed:a2:e0:16:
cb:0a:60:49:e0:bc:a0:2b:6a:1f:47:60:c3:f2:61:
54:e6:41:c9:83:ce:df:9a:a6:29:cb:3f:a0:f4:54:
22:24:76:75:9f:57:8e:02:b8:18:6f:46:84:d0:fe:
a4:af:29:21:7e:46:cc:47:a5:19:42:b3:c2:0f:a7:
cb:b3:b6:27:22:d2:53:a2:65:62:96:e5:c8:94:d0:
a9:8d:21:86:c5:22:ea:4a:c7:a1:69:2e:76:4a:b2:
5c:75:92:bb:39:24:ff:21:df:a3:f6:85:13:8e:07:
2e:02:af:0c:c9:49:50:eb:98:27:f8:87:e2:ef:5d:
60:e9:ea:dd:cd:52:6b:2f:b4:f6:54:a7:2c:5b:36:
a5:92:4e:95:ac:03:30:f6:4a:29:80:5d:53:e0:15:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:59:6E:60:40:7A:40:2C:98:83:7D:14:06:F6:65:88:C6:B3:5E:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d2c7f6d3-90ad-3706-b8a8-e63a8d473ff6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
75.221.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:46:87:52:20:9a:6d:3a:67:82:9a:fe:82:f4:c8:16:e3:c2:
c6:ee:27:37:b2:2c:b5:f5:f9:77:0c:61:76:b7:92:c0:65:b3:
33:c7:44:31:5a:ae:69:65:90:74:50:36:be:9b:42:99:02:dc:
70:82:ed:0f:11:1d:79:9c:fc:6e:3b:79:75:ef:1c:9e:0e:3c:
1c:49:e2:09:c5:96:9a:40:af:88:63:7d:9f:cb:c3:d5:13:3e:
8b:fa:80:9c:65:ae:00:50:19:b0:90:46:a1:89:52:96:56:cd:
ba:55:28:e8:1d:dd:46:76:67:93:d9:00:94:5f:d1:5e:11:08:
e1:d0:d7:0c:cf:b6:3c:21:fb:70:c9:43:65:da:9a:76:36:f9:
11:a6:2f:bd:d6:f8:3b:1e:3f:1f:bb:8a:ad:1c:75:da:87:cc:
44:a1:6c:c5:ac:73:36:9f:79:2a:de:8f:65:2f:77:03:ec:68:
3b:4f:21:3d:2d:73:6e:40:69:a5:8e:84:45:5b:9a:16:c6:14:
b0:a8:64:39:b3:20:0d:5f:39:e1:1b:9b:29:94:51:fe:6c:d6:
4f:f0:41:eb:66:d1:45:6d:e6:dc:42:eb:77:81:db:14:6f:67:
2e:c1:67:20:82:00:b9:d7:8c:ad:eb:03:12:87:19:53:6f:49:
81:73:aa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 20:25:22 2025 by rpki-client